r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

dameflare

DameFlare Unauthenticated RCE via Smart Card Authentication Bypass in SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 Original research and POC: Tenable, Inc. TRA-2019-43 Python 3 tool: David Boyd @Fir3d0g How It Works Dameware MRC exposes a remote control service DWRCS.exe o...

OpenSC

OpenSC documentation Manual pages for the OpenSC command line tools as well as for the OpenSC configuration files are available online and typically distributed along with your installation. The OpenSC Wiki includes, among others, information for: Windows Quick Start macOS Quick Start Compiling a...

CVE-2024-8425

Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Subida Arbitraria de Archivos No Autenticada CVE-2024-8425 El plugin WooCommerce Ultimate Gift Card para WordPress es vulnerable a subidas arbitrarias de archivos debido a una validación insuficiente del tipo de archivo en las funciones...

CVE-2023-43317

CVE-2023-43317 Un usuario normal puede elevar sus privilegios a través del parámetro userPermissionsList en el componente Session Storage para obtener acceso no autorizado a recursos y funcionalidades de nivel administrativo. Esto podría llevar a acceso no autorizado a datos, modificación de dato...

PIVert

PIVert - Emulador de tarjeta inteligente PIV Introducción PIVert es un emulador de tarjeta inteligente PIV NIST SP 800-73. Puede proporcionar a PIVert un archivo PFX que contenga un certificado y su clave privada correspondiente, y la herramienta emulará la tarjeta ante Windows como una tarjeta P...

libfreefare

Introduction The libfreefare project provides a convenient API for MIFARE card manipulations. It is part of the nfc-tools , you can find more info on them on the nfc-tools wiki. If you are new to libfreefare or the nfc-tools , you should collect useful information on the project website and the...

virtualbox_e1000_0day

Por qué Me gusta VirtualBox y no tiene nada que ver con por qué publico una vulnerabilidad 0day. La razón es mi desacuerdo con el estado contemporáneo de la infosec, especialmente de la investigación de seguridad y el bug bounty: 1. Esperar medio año hasta que una vulnerabilidad sea parcheada se...

CVE-2025-63296

CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...

pivit

Pivit Pivit es una herramienta de línea de comandos para gestionar certificados x509 almacenados en tarjetas inteligentes con soporte de applet PIV Yubikey, y usar esos certificados para firmar y verificar datos. Es totalmente compatible con la forma en que la línea de comandos de git llama a...

swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

swsim

swSIM El proyecto necesita clonarse de forma recursiva. Descargar el ZIP no es suficiente. swSIM es una tarjeta SIM totalmente software. Es el primer simulador de tarjeta SIM disponible públicamente hasta donde yo sé que no depende de ningún hardware SIM para funcionar. Alcance Un simulador de...

SUSE CVE-2026-80812

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

SUSE CVE-2026-80828

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

AZL-99675 CVE-2026-80812 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

CVE-2026-80812

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

CVE-2026-80812

CVE-2026-80812 affects the Linux kernel 's ALSA dummy driver. The function snd_dummy_probe() does not validate the devptr->id (card index) value, assuming it is always within range. While this is safe for devices created at module probe time, a device manually bound via the sysfs interface can...

CVE-2026-80812 ALSA: dummy: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for the devices the driver itself creates at the module probe time, but if...

CVE-2024-11423

CVE-2024-11423 Ultimate Gift Cards for WooCommerce = 3.0.6 - प्राधिकरण की कमी से अनंत धन गड़बड़ी विवरण WordPress प्लगइन Ultimate Gift Cards for WooCommerce – WooCommerce गिफ्ट कार्ड और गिफ्ट वाउचर बनाएं, डिजिटल गिफ्ट कूपन रिडीम करें और प्रबंधित करें। गिफ्ट सर्टिफिकेट प्रदान करें, गिफ्ट कार्ड...

Linux Distros Unpatched Vulnerability : CVE-2026-80812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: dummy: Check card index validity at probe snddummyprobe blindly trusts that the given devptr-id value is within the proper card index range. It's OK for t...